Skip to content
OpenAdvisories
Medium · 5.0 CVE-2023-2629 EUVD-2023-1585GHSA-mq3x-qgwx-3rfw

Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework

Published May 10, 2023 · Updated Jan 27, 2025 · Assigned by @huntrdev

Vendor: pimcore Product: Pimcore Customer Data Framework Package: pimcore/customer-management-framework-bundle Ecosystem: Packagist

Description

Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9.

Affected products

VendorProductAffectedFixed
pimcore pimcore/customer-data-framework unspecified – < 3.3.9 3.3.9

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist pimcore/customer-management-framework-bundle < 3.3.9 3.3.9 GHSA-mq3x-qgwx-3rfw

References